Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS144828.roa
File: AS144828.roa (raw, json)
Hash identifier: ZRe0Xyn1La+DHAZ6f3xv3uxF1GT7ovnzHk4wipF0wzU=
Subject key identifier: 47:1C:E1:9A:E9:D1:24:8E:C4:BE:D6:70:42:1D:4F:15:ED:51:B4:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0426CF4858B8EE15EA35C30CBFD7D9B8C279B3BB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144828.roa
Signing time: Mon 25 May 2026 06:28:18 +0000
ROA not before: Mon 25 May 2026 06:23:18 +0000
ROA not after: Mon 24 May 2027 06:28:18 +0000
asID: 144828
IP address blocks: 240a:a882::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:26:cf:48:58:b8:ee:15:ea:35:c3:0c:bf:d7:d9:b8:c2:79:b3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:18 2026 GMT
Not After : May 24 06:28:18 2027 GMT
Subject: CN=471CE19AE9D1248EC4BED670421D4F15ED51B4AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:d9:ef:db:43:c1:44:69:a2:cf:f3:b0:7c:
3b:66:a1:3b:8d:6b:cb:8f:ad:69:7b:b1:26:9f:0a:
7a:0f:22:e7:8d:b9:c8:b8:86:de:74:c6:08:01:90:
41:a0:1b:49:f7:98:68:fe:34:d3:21:a7:c7:c4:0c:
cb:c7:dc:3f:8a:93:53:d7:b6:3f:2c:c4:cc:58:3e:
45:cc:69:c9:31:60:25:8e:96:1b:b7:8d:fc:07:e8:
0a:5a:b2:7c:d6:1f:d2:34:82:18:65:87:02:8e:3d:
de:d2:cc:09:f9:dd:32:bf:7b:90:4e:83:72:1a:36:
65:66:f5:5a:9d:94:f7:7c:8e:d1:a4:0f:4b:bc:22:
02:ca:a3:4f:29:f0:2c:8a:13:4b:67:d5:05:05:a7:
d3:9d:1d:5b:70:9a:10:4e:88:f3:a6:09:e5:42:44:
f9:ae:8c:16:f4:0e:ac:75:4f:27:71:4f:7b:05:37:
11:9c:38:37:2e:69:b9:b0:e0:a5:e8:08:e3:78:dd:
0d:5c:15:88:a0:31:16:bb:5b:0b:90:05:48:d3:ad:
42:cd:8c:1c:78:5c:b1:5d:29:9e:c2:14:f3:c5:9e:
92:d1:1a:84:63:ef:96:29:c4:f8:5d:ea:38:8c:c0:
0d:7f:63:f7:6c:fc:ea:e7:b8:44:7c:3f:ad:f5:2f:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1C:E1:9A:E9:D1:24:8E:C4:BE:D6:70:42:1D:4F:15:ED:51:B4:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS144828.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a882::/32
Signature Algorithm: sha256WithRSAEncryption
02:74:a1:6c:80:8b:d9:e5:23:77:82:93:5d:84:98:25:35:ca:
e1:ac:fd:1a:e6:4f:86:23:01:3b:34:71:a2:66:64:55:b7:3b:
e4:c0:26:fa:4e:a8:a7:01:90:7d:b0:30:70:1a:d8:ee:6d:b1:
93:d8:83:7a:7c:59:fc:02:91:6e:88:56:f1:d8:f2:fc:94:ac:
07:10:4a:af:d2:8a:30:9f:4d:97:8d:da:11:ad:91:fd:40:a0:
fc:63:e6:aa:d6:c5:e4:a8:c5:fb:62:dd:16:14:27:e9:5e:c1:
3a:52:85:4d:17:e5:3a:52:78:e6:e2:bb:9c:31:13:36:97:03:
d1:28:6f:f4:5b:bc:77:2e:e8:f7:21:9a:2a:aa:af:48:bb:6d:
5a:4a:61:64:42:f0:3a:b3:11:0c:86:09:ff:67:39:ef:f0:db:
70:46:40:c2:cd:6c:65:35:fd:00:49:4f:bd:5e:f5:79:23:3f:
26:fa:ec:25:7b:76:f7:b0:20:14:1f:8a:41:9f:6c:3b:fe:0f:
29:56:a6:78:45:8c:b0:c7:04:3a:49:6f:4d:e3:40:31:3b:a0:
e4:fe:ed:a0:f3:e8:8f:cb:ff:50:50:3c:f5:bf:e5:74:cf:57:
4a:08:5d:8a:3c:8e:e8:49:a5:f0:30:49:03:aa:a2:33:9d:16:
37:41:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client